Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+

20 advisories

Loading
Pillow buffer overflow vulnerability High
CVE-2024-28219 was published for pillow (pip) Apr 3, 2024
Memory corruption while processing voice packet with arbitrary data received from ADSP. High Unreviewed
CVE-2024-38422 was published Nov 4, 2024
An issue in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause a denial of... High Unreviewed
CVE-2024-24478 was published Feb 21, 2024
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out... High Unreviewed
CVE-2023-37536 was published Oct 11, 2023
Memory corruption while using the UIM diag command to get the operators name. High Unreviewed
CVE-2023-33018 was published Dec 5, 2023
Memory corruption in RIL while trying to send apdu packet. High Unreviewed
CVE-2023-21648 was published Aug 8, 2023
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during... High Unreviewed
CVE-2022-40530 was published Mar 10, 2023
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic... High Unreviewed
CVE-2022-33296 was published Apr 13, 2023
Memory corruption in HLOS while invoking IOCTL calls from user-space. High Unreviewed
CVE-2023-33022 was published Dec 5, 2023
Memory corruption while loading an ELF segment in TEE Kernel. High Unreviewed
CVE-2023-28585 was published Dec 5, 2023
Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request. High Unreviewed
CVE-2023-21644 was published Sep 5, 2023
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during... High Unreviewed
CVE-2022-33282 was published Apr 13, 2023
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response High Unreviewed
CVE-2022-25705 was published Mar 10, 2023
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a... High Unreviewed
CVE-2022-33248 was published Feb 12, 2023
Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics. High Unreviewed
CVE-2024-21454 was published Apr 1, 2024
Memory corruption while allocating memory for graphics. High Unreviewed
CVE-2024-21470 was published Apr 1, 2024
Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the... High Unreviewed
CVE-2019-18568 was published May 24, 2022
An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A... High Unreviewed
CVE-2022-29886 was published Aug 6, 2022
An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A... High Unreviewed
CVE-2022-32543 was published Aug 6, 2022
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding... High Unreviewed
CVE-2021-21852 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database